$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bf51fd-63af-3edc-af14-4384d6c04af8.roa File: d6bf51fd-63af-3edc-af14-4384d6c04af8.roa (raw, json) Hash identifier: J26KqkLpEUXgFGGup/1Pa6i0KuRe8i9conwOb9sFBQ0= Subject key identifier: 37:68:32:CA:D3:9E:61:B9:65:19:B5:9F:D9:B9:DF:FB:65:62:21:6C Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584B76F2018FFD77975C6E64C780 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bf51fd-63af-3edc-af14-4384d6c04af8.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 22773 IP address blocks: 70.172.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:01:8f:fd:77:97:5c:6e:64:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=57e4ec39-c048-49eb-a3cb-496a5aa8e529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:5d:c9:77:30:d9:90:0b:7f:11:60:c5:e4: 6c:5f:cc:1b:af:2b:19:01:94:71:53:36:15:69:58: 0e:2c:2a:99:6f:ce:3d:de:2d:43:15:b9:1e:e8:9d: 66:b7:2f:27:b0:c4:57:ab:67:ec:0a:3d:15:61:13: 9a:04:16:16:6e:e3:54:e6:0d:ef:9d:e7:09:1c:c5: 4f:f2:99:6e:69:66:da:98:ac:3b:86:09:58:e0:6f: 6a:27:06:6f:53:ef:05:f1:b9:04:97:f0:03:08:47: 51:65:01:b1:8c:7d:7c:fb:69:28:74:61:5e:c6:59: 2e:8a:7d:df:8b:80:77:90:37:c9:95:74:5f:96:12: 10:08:f2:01:42:26:4f:c7:f4:82:54:ba:2e:9e:1a: bf:23:79:82:66:c1:29:5d:6e:13:26:80:cd:47:a1: cc:ca:81:50:90:58:1b:9b:a4:cb:9e:27:db:0b:0f: 1f:54:bd:3c:eb:e5:6a:96:49:ca:db:b9:7f:0b:f5: 09:4a:0b:50:12:77:23:1b:23:9f:81:7b:44:7b:fc: 0f:e8:e9:5c:0d:c8:a6:40:60:c7:f7:9c:12:27:4d: 7c:cd:28:49:49:12:ce:a5:b7:92:42:3e:57:39:20: 51:18:89:f0:e8:c1:81:f0:c2:29:f1:fa:fd:73:1d: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:32:CA:D3:9E:61:B9:65:19:B5:9F:D9:B9:DF:FB:65:62:21:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bf51fd-63af-3edc-af14-4384d6c04af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 70.172.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a9:6f:de:af:9e:68:0b:29:0f:19:02:ff:1c:3b:fc:d7:e9: 86:7c:b6:87:d2:74:c1:f5:40:4d:cc:84:ca:f4:3f:a6:ef:4d: ac:8b:3f:4b:49:29:b4:97:6c:be:b6:1c:c1:b6:76:16:72:a7: 5b:ce:a5:7b:1f:61:d7:91:d3:fc:93:3c:5e:68:d7:37:8a:26: 63:cd:a2:57:55:a9:7f:32:72:2a:d9:45:49:92:69:ea:36:4e: d4:9d:7c:bd:e6:25:b7:5c:dc:20:5b:82:1c:be:6b:77:f7:0d: 82:6a:f8:0f:75:08:12:57:2d:fb:ed:33:c8:17:c9:4c:2d:14: 4d:35:c2:88:08:31:0b:65:92:15:4a:35:f5:f9:72:66:83:f8: 37:33:2e:d3:8b:0c:c5:4b:1a:cd:42:da:94:4d:a8:56:09:06: 96:16:f5:df:a3:6b:d2:23:3c:0c:6c:a4:56:30:2c:bb:9d:ae: 9f:4d:03:70:5e:ed:bc:b5:dc:19:ef:84:01:f5:d3:64:b6:6c: 68:ce:22:93:72:d6:e5:42:5f:a8:55:85:e9:50:33:98:8a:86: 34:6b:24:56:d9:66:fa:19:aa:0f:51:18:38:74:0f:91:da:66: c4:ea:97:fc:3c:11:c9:11:0c:7e:66:ac:79:11:73:a8:0f:ac: 28:91:67:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28gGP/XeXXG5kx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk NTdlNGVjMzktYzA0OC00OWViLWEzY2ItNDk2YTVhYThlNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCldyXcw2ZALfxFgxeRsX8wbrysZAZRxUzYV aVgOLCqZb8493i1DFbke6J1mty8nsMRXq2fsCj0VYROaBBYWbuNU5g3vnecJHMVP 8pluaWbamKw7hglY4G9qJwZvU+8F8bkEl/ADCEdRZQGxjH18+2kodGFexlkuin3f i4B3kDfJlXRflhIQCPIBQiZPx/SCVLounhq/I3mCZsEpXW4TJoDNR6HMyoFQkFgb m6TLnifbCw8fVL086+VqlknK27l/C/UJSgtQEncjGyOfgXtEe/wP6OlcDcimQGDH 95wSJ018zShJSRLOpbeSQj5XOSBRGInw6MGB8MIp8fr9cx28LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdoMsrTnmG5ZRm1n9m53/tlYiFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDZiZjUxZmQtNjNhZi0z ZWRjLWFmMTQtNDM4NGQ2YzA0YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqyaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqpb96vnmgLKQ8ZAv8cO/zX6YZ8tofSdMH1QE3MhMr0P6bvTayLP0tJ KbSXbL62HMG2dhZyp1vOpXsfYdeR0/yTPF5o1zeKJmPNoldVqX8ycirZRUmSaeo2 TtSdfL3mJbdc3CBbghy+a3f3DYJq+A91CBJXLfvtM8gXyUwtFE01wogIMQtlkhVK NfX5cmaD+DczLtOLDMVLGs1C2pRNqFYJBpYW9d+ja9IjPAxspFYwLLudrp9NA3Be 7by13BnvhAH102S2bGjOIpNy1uVCX6hVhelQM5iKhjRrJFbZZvoZqg9RGDh0D5Ha ZsTql/w8EckRDH5mrHkRc6gPrCiRZ7s= -----END CERTIFICATE-----Generated at Wed Oct 15 21:25:02 2025 by rpki-client